huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 8.230.107.68 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-02 |
| 8.230.115.33 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-02 |
| 8.219.4.120 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 94.154.43.138 Turkey · Net Gate Telecom S.R.L. | malware elf-binary | ELF | 11 | 2026-10-02 |
| 94.154.43.130 Turkey · Net Gate Telecom S.R.L. | exposed-secret | TXT | 1 | 2026-10-02 |
| 94.154.43.103 Turkey · Net Gate Telecom S.R.L. | exposed-secret | TXT | 1 | 2026-10-02 |
| 94.154.43.37 Turkey · Net Gate Telecom S.R.L. | c2 tunnel | SH | 1 | 2026-10-02 |
| 94.154.43.4 Turkey · Net Gate Telecom S.R.L. | exposed-secret | TXT | 1 | 2026-10-02 |
| 94.154.43.8 Turkey · Net Gate Telecom S.R.L. | exposed-secret | TXT | 1 | 2026-10-02 |
| 176.65.139.220 The Netherlands · Offshore LC | malware elf-binary pe-binary | ELF, PE, SH | 9 | 2026-10-02 |
| 176.65.139.218 The Netherlands · Offshore LC | malware mirai elf-binary | ELF, SH | 12 | 2026-10-02 |
| 176.65.139.153 The Netherlands · Offshore LC | malware elf-binary | ELF | 13 | 2026-10-02 |
| 176.65.139.78 The Netherlands · Offshore LC | malware elf-binary | ELF, SH | 15 | 2026-10-02 |
| 176.65.139.35 The Netherlands · Offshore LC | malware elf-binary | ELF | 14 | 2026-10-02 |
| 107.175.93.41 United States · HostPapa | exposed-secret | COM | 1 | 2026-10-02 |
| 91.203.147.206 Ukraine · FOP Kazakov Oleksandr Oleksandrovich | exposed-secret | COM | 1 | 2026-10-02 |
| 31.7.188.16 Germany · Core-Backbone GmbH | exposed-secret | NET | 1 | 2026-10-02 |
| 96.44.175.182 United States · HostPapa | files | COM | 1 | 2026-10-02 |
| 5.83.129.63 Germany · Raul Ghita trading as 'Ghita Telekom' | exposed-secret | NET | 1 | 2026-10-02 |
| 107.150.45.138 United States · Nocix, LLC | exploit | COM | 1 | 2026-10-02 |
| 64.235.61.78 United States · Las Vegas NV Datacenter | exposed-secret | COM | 1 | 2026-10-02 |
| 89.43.66.139 Turkey · Netinternet Bilisim Teknolojileri AS | exploit | NET | 1 | 2026-10-02 |
| 89.43.66.136 Turkey · Netinternet Bilisim Teknolojileri AS | files | COM | 1 | 2026-10-02 |
| 103.227.255.165 Indonesia · PT Raja Mitra Informatika | files | NET | 1 | 2026-10-02 |
| 64.15.147.212 Canada · Leaseweb Canada Inc. | files | COM | 1 | 2026-10-02 |
| 109.75.164.82 United Kingdom · IOMART HOSTING LIMITED | files | NET | 1 | 2026-10-02 |
| 146.70.232.28 Poland · M247 Europe SRL | exposed-secret | INFO | 1 | 2026-10-02 |
| 23.26.4.66 United States · Raff Technologies LLC | exposed-secret | NET | 1 | 2026-10-02 |
| 45.64.217.11 India · MegaHostZone | exposed-secret | COM | 1 | 2026-10-02 |
| 172.67.181.121 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-02 |
| 104.21.35.240 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-02 |
| 89.163.211.117 Germany · WIIT AG | exposed-secret | COM | 2 | 2026-10-02 |
| 80.84.57.106 United Kingdom · IOMART CLOUD SERVICES LIMITED | files | SITE | 1 | 2026-10-02 |
| 103.212.220.92 South Korea · Hostcenter | exploit | ORG | 1 | 2026-10-02 |
| 188.94.191.45 France · Baxet Group Inc. | exposed-secret | COM, NET | 2 | 2026-10-02 |
| 217.195.153.196 The Netherlands · Shock Hosting LLC | exposed-secret | RU | 1 | 2026-10-02 |
| 77.90.188.124 Poland · MEVSPACE sp. z o.o. | files | PRO | 1 | 2026-10-02 |
| 85.121.52.187 Romania · M247 Europe SRL | exposed-secret | COM | 1 | 2026-10-02 |
| 155.4.245.1 Sweden · Bahnhof AB | files | NET | 1 | 2026-10-02 |
| 81.30.156.112 Germany · WIIT AG | files | COM | 1 | 2026-10-02 |
| 208.110.73.82 United States · WholeSale Internet, Inc. | files | COM | 1 | 2026-10-02 |
| 109.75.164.59 United Kingdom · IOMART HOSTING LIMITED | files | NET | 1 | 2026-10-02 |
| 46.20.33.195 Germany · WIIT AG | files | ORG | 1 | 2026-10-02 |
| 31.57.187.100 Turkey · KEYUBU Internet ve Bilisim Tic. Ltd. Sti. | files | NET | 1 | 2026-10-02 |
| 78.109.20.148 United States · ARPHost, LLC | exposed-secret | MY | 2 | 2026-10-02 |
| 155.4.245.222 Sweden · Bahnhof AB | files | COM | 1 | 2026-10-02 |
| 103.161.132.62 Malaysia · GB Network Solutions Sdn. Bhd. | files | COM | 1 | 2026-10-02 |
| 185.170.211.103 The Netherlands · Starry Network Limited | files | COM | 1 | 2026-10-02 |
| 109.75.164.208 United Kingdom · IOMART HOSTING LIMITED | exposed-secret | NET | 1 | 2026-10-02 |
| 37.48.85.54 The Netherlands · LeaseWeb Netherlands B.V. | files | COM | 1 | 2026-10-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free